$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa File: 40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa (raw, json) Hash identifier: Ix2aqx508jXR1QYW9zsVmrjV2BdxrKf+JJRPEgZTGgM= Subject key identifier: A0:25:E2:29:A8:3C:45:0E:A8:26:D2:4D:BA:C5:61:26:80:B7:0E:B5 Certificate issuer: /CN=214de91d-b5db-4aa3-aab9-2a7f2c0075b6 Certificate serial: 010D0C9F4328584AC9DB9D57C7CEEDFCCB5C6200 Authority key identifier: F7:B7:99:5C:7B:1A:30:18:CC:99:0A:04:2D:53:DC:80:BE:02:B0:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 396982 IP address blocks: 207.154.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:9d:57:c7:ce:ed:fc:cb:5c:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=214de91d-b5db-4aa3-aab9-2a7f2c0075b6 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=104f8cef-87de-4c6b-899a-f40217895474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:16:ce:e1:89:89:49:31:4c:f6:b3:e9:42: 62:2d:d7:a7:f8:f0:8d:7a:ac:c3:2a:ed:66:31:30: 1c:6d:d7:88:40:d8:83:44:fd:7f:00:5b:fc:51:ac: ce:06:00:2e:d1:c3:63:66:8d:c1:71:3f:d5:a0:a0: 51:f0:28:1a:a1:e9:45:b7:57:d8:f2:f5:51:60:5d: 17:ba:34:7f:c9:13:79:65:f5:a5:d9:99:65:66:8c: 37:0c:85:ee:48:1e:f3:05:fd:d2:39:08:86:f9:49: 08:86:50:ec:07:73:2a:61:39:51:7e:58:fa:e1:3d: 13:c5:d7:22:74:cc:b0:12:68:f7:64:6e:33:a8:d9: 28:81:63:a6:89:9c:2b:b3:2c:e2:89:ea:08:14:2a: ba:82:d6:b0:a6:6f:82:f1:1e:8f:81:76:70:46:77: 6a:13:35:1f:30:4e:ab:4e:f4:91:88:0c:1a:cb:37: 26:fe:6d:33:c0:be:b5:6a:9a:48:5c:71:ca:17:9c: 01:94:37:e2:6a:b4:17:75:1e:b3:80:1f:d4:db:26: 2d:81:75:5e:43:ee:61:56:f9:d9:f0:31:3a:03:4c: 69:2f:ef:e0:52:94:cb:dd:e7:59:92:09:50:a7:13: f9:ed:85:98:e6:62:9e:99:c4:5d:d0:fe:56:d9:5a: d8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:25:E2:29:A8:3C:45:0E:A8:26:D2:4D:BA:C5:61:26:80:B7:0E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.crl X509v3 Authority Key Identifier: keyid:F7:B7:99:5C:7B:1A:30:18:CC:99:0A:04:2D:53:DC:80:BE:02:B0:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer sbgp-ipAddrBlock: critical IPv4: 207.154.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e0:cf:1b:31:2a:a1:a9:c0:72:53:fb:3b:a8:45:3c:df:a0: d0:6d:ef:02:81:bb:f7:85:36:82:35:11:f1:54:9b:6c:29:79: 80:cc:bb:28:de:fb:e9:42:23:99:af:74:d9:ae:ec:77:23:f8: 59:9b:1f:04:43:6a:ed:99:16:c9:9c:3f:16:ed:ce:bf:06:99: 3c:b1:d0:c6:c1:b4:ec:0e:93:8f:af:44:5b:13:67:24:07:11: 2e:50:c1:9c:ec:73:31:dd:be:92:af:d6:3c:5d:92:5f:4e:d6: 39:38:a3:d8:c4:7b:2a:13:5e:3e:ed:c8:e7:af:21:5c:15:6b: ed:44:1a:7f:21:61:72:8e:62:84:3f:9d:a5:c6:55:0f:1d:ca: 29:e6:8e:a3:d9:6d:66:c9:fb:e1:95:aa:32:dc:e2:a4:6e:93: 34:4d:8c:2a:8f:c5:d4:53:88:67:96:be:94:62:d8:89:24:7b: 57:df:5b:ba:d9:35:27:8b:c7:e1:d8:53:1c:5a:cf:7c:5c:04: 79:f9:77:1e:bd:e0:f5:11:3d:99:b4:85:8c:64:80:2c:d7:89: 9d:bd:57:75:0f:e1:ec:16:e8:ac:03:4a:3e:d3:29:63:b0:9c: 16:76:51:06:81:6f:7b:c8:e1:00:fd:9a:6c:98:38:88:3b:25: 4d:28:dc:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ251Xx87t/MtcYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0ZGU5MWQtYjVkYi00YWEzLWFhYjktMmE3ZjJjMDA3 NWI2MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk MTA0ZjhjZWYtODdkZS00YzZiLTg5OWEtZjQwMjE3ODk1NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDEWzuGJiUkxTPaz6UJiLden+PCNeqzDKu1m MTAcbdeIQNiDRP1/AFv8UazOBgAu0cNjZo3BcT/VoKBR8CgaoelFt1fY8vVRYF0X ujR/yRN5ZfWl2ZllZow3DIXuSB7zBf3SOQiG+UkIhlDsB3MqYTlRflj64T0Txdci dMywEmj3ZG4zqNkogWOmiZwrsyziieoIFCq6gtawpm+C8R6PgXZwRndqEzUfME6r TvSRiAwayzcm/m0zwL61appIXHHKF5wBlDfiarQXdR6zgB/U2yYtgXVeQ+5hVvnZ 8DE6A0xpL+/gUpTL3edZkglQpxP57YWY5mKemcRd0P5W2VrY7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAl4imoPEUOqCbSTbrFYSaAtw61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMTRk ZTkxZC1iNWRiLTRhYTMtYWFiOS0yYTdmMmMwMDc1YjYvNDA0NjZmZTUtZWFlYi0z N2IxLTkzNTYtYjEzNjJiMWRkOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjE0ZGU5MWQtYjVkYi00YWEzLWFh YjktMmE3ZjJjMDA3NWI2LzIxNGRlOTFkLWI1ZGItNGFhMy1hYWI5LTJhN2YyYzAw NzViNi5jcmwwHwYDVR0jBBgwFoAU97eZXHsaMBjMmQoELVPcgL4CsB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMTRkZTkxZC1iNWRiLTRhYTMtYWFiOS0yYTdm MmMwMDc1YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz5qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7gzxsxKqGpwHJT+zuoRTzfoNBt7wKBu/eFNoI1EfFUm2wpeYDMuyje ++lCI5mvdNmu7Hcj+FmbHwRDau2ZFsmcPxbtzr8GmTyx0MbBtOwOk4+vRFsTZyQH ES5QwZzsczHdvpKv1jxdkl9O1jk4o9jEeyoTXj7tyOevIVwVa+1EGn8hYXKOYoQ/ naXGVQ8dyinmjqPZbWbJ++GVqjLc4qRukzRNjCqPxdRTiGeWvpRi2Ikke1ffW7rZ NSeLx+HYUxxaz3xcBHn5dx694PURPZm0hYxkgCzXiZ29V3UP4ewW6KwDSj7TKWOw nBZ2UQaBb3vI4QD9mmyYOIg7JU0o3D8= -----END CERTIFICATE-----Generated at Sat Oct 25 13:31:45 2025 by rpki-client